The NHS are fast becoming a target and a victim of cyber-theft.<\/p>\n
With reports from Reuters suggesting that medical records are worth ten times that of banking details, it does not come as a surprise that cyber-criminals are targeting these kinds of personal details.<\/p>\n
There were reports of 30 “ransomware” attacks in the past 12 months towards healthcare trusts, which is very concerning when you note that healthcare trusts stores millions of patient details across the UK.
\n
\nThe “ransomware” attacks are described as ‘sophisticated’ attacks with cyber-criminals using virus software to encrypt data, which could make the data inaccessible. The cyber-criminals could then demand a ransom to unlock the illegally encrypted data.<\/p>\n
Falling victim to such scams is a massive worry. Are the NHS Trusts doing enough to protect patient data? Some may argue they’re not doing enough because hospital systems can often be more outdated<\/strong> when remembering that medical technological devices are built to last, and constantly upgrading them would not be economically efficient. Some medical devices still use Windows XPe, which may lack an additional layer of security that a more updated system would have.<\/p>\n This could make the system much more vulnerable and easier to hack.<\/p>\n You might ask why this is sufficiently serious, as what can cyber-criminals do with medical records detailing our last check-up appointment, or our last injection, for example.<\/p>\n But what about the wealth of more sensitive personal information that could be used for identity fraud? Or perhaps the fact that most people do not want their private information shared<\/strong>, and, if it was to be shared, it could cause serious distress<\/strong>.<\/p>\n If the NHS is found to not have adequate protection for their patients’ records, they can be in breach of the Data Protection Act<\/strong>. The Act sets out eight principles that organisations and public bodies must comply with when handling personal data. The Information Commissioner’s Office (ICO) are responsible for enforcing the Act and are seen to be the “watchdog” for organisations that are lax in their cyber security. Data breaches in the healthcare system could be seen as the most devastating as records held do often contain the very sensitive personal data.<\/p>\n Ransom demands have been estimated to be around \u00a3300 million a year. However, NHS Digital, the organisation in charge of cyber security for the health service, assured the public that no ransom had been paid out, and no data was lost in the process.<\/p>\nThis is serious<\/h2>\n